Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I am building an e store and concerned about security of transactions.
Does any body know a good reference for best practices?
I also am wondering if it is a good idea to store credit card info in the Database for the sake of reuse by customers. to be honest I am a bit scared by the idea. any suggestions?
thank you
Strongly recommended to avoid storing credit card details.
Any interaction you have with card details will mean you need to be aware of PCI-DSS compliance. Storing card details in a PCI compliant manner is extremely challenging.
Luckily you can rely on 3rd party Payment Service Providers to help out. Think PayPal etc. These companies will perform authorisation/settlement of card transactions and store the card details on their PCI compliant servers, meaning you only handle Token Ids rather than card details.
You should definitely spend some time looking into PCI-DSS. Even by using a 3rd party provider you will still have some obligations to be PCI compliant.